owasp-agentic-mcp

Owasp Agentic MCP

OWASP Top 10 for Agentic AI security MCP server — prompt injection detection, tool poisoning, exc...

OWASP Top 10 for Agentic AI security MCP server — prompt injection detection, tool poisoning, excessive agency, data leakage assessment

OWASP Agentic MCP

OWASP Top 10 for AI Agents Security Assessment — Prompt Injection, Tool Poisoning, Data Leakage

🚀 Quick Start

# Install via pip
pip install owasp_agentic_mcp

# Or install via Smithery
npx -y @smithery/cli@latest install owasp-agentic-mcp --client claude

✨ Features

• MCP protocol compliant
• Easy installation
• Well-documented API
• Production-ready
• Active maintenance

📖 Documentation

• Full Documentation
• API Reference
• EU AI Act Compliance Guide

🛡️ Compliance

This MCP server is built with EU AI Act compliance built-in:

• ✅ Article 9 — Risk Management System
• ✅ Article 13 — Transparency & Instructions for Use
• ✅ Article 15 — Bias Detection & Testing
• ✅ Article 26 — FRIA Support (where applicable)
• ✅ Article 50 — AI Content Watermarking (where applicable)

Need help getting compliant? Book a free 15-min diagnostic →

🏢 Enterprise

Need custom development, SLA guarantees, or white-label deployment?

• Pro: $99/mo — Full MCP suite + EU AI Act tracking
• Enterprise: $499/mo — Custom dev + SLA + Dedicated support

View Pricing → | Contact Sales →

🤝 Part of the MEOK Ecosystem

This server is part of the MEOK AI Labs ecosystem — 300+ MCP servers for sovereign AI governance.

Domain	Purpose
councilof.ai	EU AI Act compliance marketplace
safetyof.ai	AI safety & monitoring
meok.ai	Sovereign AI platform
cobolbridge.ai	Legacy modernization

📜 License

MIT © CSOAI-ORG

_{Built with 💜 by MEOK AI Labs · UK Companies House 16939677}

Security assessment tools based on the OWASP Top 10 for AI Agents. Scan agent configurations for prompt injection vulnerabilities, tool poisoning risks, excessive agency, data leakage, and more.

Tools

Tool	Description	Parameters
full_agent_scan	Full OWASP Agentic Top 10 security scan	agent_config, tools, permissions
assess_agentic_security	Assess against specific OWASP Agentic categories	categories, agent_config
check_prompt_injection	Test for prompt injection vulnerabilities	system_prompt, user_input_template
check_tool_poisoning	Check for tool poisoning risks	tool_definitions, input_validation
check_excessive_agency	Assess agency level vs minimum required	allowed_tools, required_tools, permissions

Installation

pip install mcp

Claude Desktop / Cursor / VS Code / Windsurf

{
  "mcpServers": {
    "owasp-agentic": {
      "command": "python",
      "args": ["path/to/server.py"]
    }
  }
}

Usage Examples

Full agent security scan

{
  "agent_config": {
    "system_prompt": "You are a helpful assistant that can access email, calendar, and file system.",
    "allowed_tools": ["send_email", "read_calendar", "write_file"]
  },
  "permissions": ["email:send", "calendar:read", "files:write"]
}

Check prompt injection

{
  "system_prompt": "You are a financial advisor bot",
  "user_input_template": "{user_query} Please provide investment advice."
}

Pricing

• Free: 10 scans/day
• Pro: $99/mo — unlimited scans + detailed reports
• Enterprise: $499/mo — continuous monitoring + custom rules

Built by MEOK AI Labs | meok.ai

💸 Try MEOK in 30 seconds — instant buy ladder

Tier	Price	What you get	Stripe
Smoke test	£1	Signed sample MCP-Hardening report + Article 50 PDF	https://buy.stripe.com/aFa7sNcgAdQS0ZT1Uc8k91t
Quick Kit	£9	EU AI Act Article 50 implementation guide (C2PA + EU-Icon)	https://buy.stripe.com/aFa7sNcgAdQS0ZT1Uc8k91t
Founder Call	£29	30-min 1-on-1 with the founder	https://buy.stripe.com/aFa7sNcgAdQS0ZT1Uc8k91t

Refundable. UK Stripe — VAT-clean. Builds on the 81-MCP MEOK fleet. Verify any signed report at https://meok.ai/verify.